CancelDll
LoadDll
Behavioral task
behavioral1
Sample
65723e289b51a39b976438009818cb01_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65723e289b51a39b976438009818cb01_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
65723e289b51a39b976438009818cb01_JaffaCakes118
Size
87KB
MD5
65723e289b51a39b976438009818cb01
SHA1
5e510d2e8414d3061074e6d933bc06326ed3e3b4
SHA256
7ba7ac0f5568e4202c2f7c290272888f967a3f0d871f0b5325009e1b1222d2b7
SHA512
d475d94ceb90854f788d423285143fa97068ce84a90a298e8a5ebf62369d5d39ff0f59dd6301ae45edd265bd1a58304af596ddfc3745ca56bf56f9d087ce72e1
SSDEEP
1536:QPHd2owFn+G5mAGHnWaujz8n2jpVzPfcdxtEkv8CnKmTI:QP9hwdmPnWbz82tVr8tE+t0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
65723e289b51a39b976438009818cb01_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE